Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. Please amend the claims as follows: 

Listing of Claims; 

1 . (Currently Amended) A method for negotiating a set of security parameters 
usable by an initiator and a responder to create a secure path over a network for exchanging 
information, the method including a plurality of modes, comprising: 

conducting a main mode negotiation for establishing the secwe path and selecting the set 
of security parameters including a security protocol; 

conducting a quick mode negotiation for deriving a set of keys usable with the 
security protocol; 

wherein at least one message that comprises at least part of the a portion of the quick 
mode negotiation is sent occurs during the main mode negotiation and a quick mode pseudo 
random number is exchanged between the responder and the initiator; and 

wherein a protocol security process estabUshes inbovmd and outbound protocol security 
associations. 

2. (Original) The method of claim 1 , further comprising: 
conducting a first user mode for authenticating a first user associated with the 

initiator or responder. 

3 . (Currentiy Amended) The method of claim 2, wherein the initiator and the 
responder exchange authentication data that is calculated by application of a hash Amotion 
incorporating a secret key on data exchanged dimng the main mode negotiation . 

4. (Original) The method of claim 2, fiirther comprising: 

conducting a second user mode for authenticating a second user associated with the 
initiator or the responder. 

5. (Original) The method of claim 1 , wherein the main mode comprises: 
sending, from the initiator to the responder, a set of proposed security parameters and 
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authentication data; 

selecting, by the responder, the set of security parameters from the set of proposed 
security parameters; 

sending the set of security parameters from the responder to the initiator. 

6. (Original) The method of claim 1 , wherein the initiator identifies a pubhc 
key of the responder prior to the main mode negotiation and wherein at least a portion a first 
message sent from the initiator to the responder is encrypted using the public key. 

7. (Currently Amended) The method of claim 1, wherein the main mode 
negotiation comprises: 

sending a group advertisement from the initiator to the responder; [[and]] 
comparing the group advertisement to a set of authorized groups; and 
sending a response from the responder to the initiator. 

8. (Original) The method of claim 1, fiirther comprising: 

exchanging Diffie Hellman key data between the initiator and the responder during 
main mode for deriving keys for use with an encryption algorithm. 

9. (Original) The method of claim 1, fiuther comprising: 
exchanging a pair of notify payloads between the initiator and the responder; 

wherein the pair of notify payloads are used by the protocol security process for 
establishing the protocol security associations. 

10-17. (Canceled) 

1 8 . (Currently Amended) A comput e r - r e adable computer storage medium fer 
e xecuting encoding computer-readable instructions for negotiating a set of security parameters 
usable by an initiator and a responder to create a secure path over a network for exchanging 
information, the method including a plurality of modes, comprising: 

conducting a main mode negotiation for establishing the secure path and selecting the set 
of security parameters including a security protocol; 

conducting a quick mode negotiation for deriving a set of keys usable with the 
security protocol; 
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wherein at least one message that comprises at least part of the a portion of the quick 
mode negotiation is sent occurs during the main mode negotiation and a quick mode pseudo 
random number is exchanged between the responder and the initiator; and 

wherein a protocol security process establishes protocol security associations. 

1 9. (Currently Amended) The computer - r e adabl e computer storage medium of claim 

18, further comprising: 

conducting a user mode for authenticating one or more users associated with the 
initiator or the responder. 

20. (Currently Amended) The computer r e adabl e computer storage medium of claim 

19, wherein the initiator and the responder exchange authentication data that is calculated by 
application of a hash function incorporating a secret key on data exchanged during the main 
mode negotiation . 

2 1 . (Currently Amended) The computer r e adabl e computer storage medium of claim 
1 8, wherein the initiator identifies a public key of the responder prior to the main mode 
negotiation and wherein at least a portion a first message sent firom the initiator to the responder 
is encrypted using the public key. 

22. (Currently Amended) The computer-readable computer storage medium of claim 
1 8, wherein the main mode comprises: 

sending a group advertisement from the initiator to the responder; 

comparing the group advertisement to a set of authorized groups; and 
sending a response from the responder to the initiator. 

23 - 25. (Canceled) 

26. (New) A method for negotiating a set of security parameters usable by an initiator 
and a responder to create a secure path over a network for exchanging information, the method 

comprising: 

sending, from the initiator, a first message, wherein the first message comprises part of a 
main mode negotiation and the main mode negotiation comprises establishing the secure path 
and selecting a set of security parameters including a security protocol; 
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receiving, at the initiator, a second message, wherein the second message comprises at 
least part of a quick mode negotiation and the quick mode negotiation comprises deriving a set of 
keys usable with the security protocol; 

sending, from the initiator, a third message after receiving the second message, wherein 
the third message comprises at least part of the main mode negotiation; and 

wherein a protocol security process establishes inbound and outbound protocol security 
associations at the initiator. 

27. (New) A method for negotiating a set of security parameters usable by an initiator 
and a responder to create a secure path over a network for exchanging information, the method 
comprising: 

receiving, at the responder, a first message, wherein the first message comprises at least 
part of a main mode negotiation and the main mode negotiation comprises establishing the 
secure path and selecting a set of security parameters including a security protocol; 

sending, from the responder, a second message, wherein the second message comprises at 
least part of the main mode negotiation and at least part of a quick mode negotiation and wherein 
the quick mode negotiation comprises deriving a set of keys usable with the security protocol; 
and 

wherein a protocol security process establishes inboxmd and outbound protocol security 
associations. 
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